STGMA — Privacy Policy
Effective date: 2026-07-08 Last updated: 2026-07-08
STGMA ("STGMA", "we", "us", "our") operates the STGMA platform: a website and mobile application that connect tattoo clients ("Clients") with tattoo artists ("Artists") for consultations, quotes and bookings, including an AI-assisted consultation feature (the "Service").
This Privacy Policy explains how we collect, use, disclose and protect personal information, and how you can exercise your rights. It applies to both Clients and Artists. By using the Service you agree to this Policy.
Operator: Team STGMA (ABN 26 953 642 734) Contact: contact@stgma.id
1. The information we collect
1.1 Information Artists provide. Name, email, phone number, studio name and address, Instagram handle, portfolio and style information, pricing and availability, cancellation/deposit policies, and (where applicable) payment or payout details.
1.2 Information Clients provide. Name, email, phone number, the content of consultations and messages you send, reference images you upload, and booking details (placement, style, size, preferred dates, tattoo description).
1.3 Information created through the Service. Consultation transcripts, AI-generated summaries and quotes, booking and status records, and messages between Clients and Artists.
1.4 Information collected automatically. Device and app information, log data (including IP address), push-notification tokens, and usage analytics. We do not currently collect precise geolocation and do not provide location-based services.
Future location features. We may introduce location-based features (such as finding nearby Artists). If we do, we will update this Policy, complete any registrations required by law, and collect precise location only with your separate, explicit consent (for example through your device's location permission). Declining will not affect the rest of the Service.
1.5 Information from third parties. If you sign in with Google, Apple or Facebook, we receive basic profile information (such as your name and email) from that provider.
1.6 Reports and blocks. If you report another user, we collect the reason you select, anything you write in the report, and the identifiers of you, the person reported and the consultation concerned. If you block another user, we record that you have blocked them. We use this only to review the report, to keep the block in force, and to enforce our Terms.
1.7 Sensitive information. Tattoo-related details (such as placement or imagery) and reference images may in some cases reveal sensitive information. We collect and handle this only as reasonably necessary to provide the Service, and by submitting it you consent to our handling it for the purposes in this Policy.
2. How we use information
We use personal information to:
- create and manage accounts and authenticate you;
- provide the core Service — consultations, quotes, bookings, messaging and notifications;
- operate the AI consultation feature (see Section 3);
- process and communicate about deposits, bookings and cancellations, including sending transactional emails;
- operate, maintain, analyse, improve and develop the Service and our features, including our artificial-intelligence and machine-learning features;
- provide customer support, ensure security, prevent fraud and misuse, and enforce our terms;
- send marketing communications only with your consent, which you may withdraw at any time — every marketing message includes an unsubscribe option, consistent with the Spam Act 2003 (Cth). Transactional messages about your bookings are not marketing;
- comply with law and respond to lawful requests.
Where we use information to develop, train, evaluate or improve our features (including AI features), we use de-identified, aggregated or anonymised information wherever practicable, so that it does not identify you.
3. Artificial intelligence
The Service includes an AI consultation assistant. To generate responses, summaries and quotes, the content of a consultation (including messages, and booking-related details you provide) is processed by us and by our AI service provider(s) (currently Anthropic, provider of the Claude models). These providers act as our service providers and process the content to return a response to us.
We may also use consultation and usage data — on a de-identified or aggregated basis wherever practicable — to monitor, evaluate and improve the quality, accuracy and safety of the Service and its AI features.
Do not submit information you do not want processed for these purposes.
4. When we disclose information
4.1 Between Clients and Artists. To provide the Service, information you submit for a consultation or booking (including your name, contact details, messages and reference images) is shared with the Artist you are engaging, and an Artist's public profile information is shown to Clients.
4.2 Service providers. We disclose information to third parties that host and run the Service on our behalf, under contract and only for our purposes, including: cloud hosting and database (Supabase), application hosting (Vercel), transactional email (Resend), AI processing (Anthropic), push notifications (Expo), and authentication providers (Google, Apple, Facebook). Some of these providers, and their servers, are located outside Australia (including in the United States and Japan); by using the Service you consent to such overseas disclosure.
4.3 Legal and safety. We may disclose information where required or permitted by law, to enforce our terms, or to protect the rights, safety or property of any person.
4.4 Business transfers. We may disclose information in connection with a merger, acquisition, financing or sale of assets.
4.5 We do not sell your personal information.
5. Data retention
We keep personal information for as long as needed to provide the Service and for legitimate business, legal, tax and dispute-resolution purposes, after which we delete or de-identify it, as APP 11.2 permits.
As a guide:
| Information | How long we keep it |
|---|---|
| Account details (name, email, phone, date of birth) | While your account is open |
| Consultation messages and reference images | Up to 12 months after the consultation ends |
| Booking records | Up to 12 months after the booking date |
| Reports of misconduct | Up to 12 months after the report is closed |
| Server and access logs | Up to 3 months |
| De-identified or aggregated data | Indefinitely — it does not identify you |
If you delete your account, we delete your profile and the consultations, bookings and images associated with it. We may keep records we are required by law to retain, and de-identified or aggregated data that can no longer identify you.
6. Security
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including access controls, encryption in transit, and one-way hashed storage of passwords (passwords are never stored or logged in plain text). No method of transmission or storage is completely secure.
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under the Privacy Act.
7. Your rights
Subject to the Privacy Act, you may request access to, or correction of, the personal information we hold about you. You can delete your account directly within the app (account settings), or request deletion, access or correction by contacting us at contact@stgma.id. We may need to verify your identity. Some information may be retained where permitted or required by law.
8. Cookies and analytics
The Service uses cookies and similar technologies that are necessary to operate, secure and improve it, and may use analytics to understand usage. You can control cookies through your browser settings; disabling them may affect functionality.
9. Children
The Service is not directed to, and must not be used by, anyone under 18. We do not knowingly collect personal information from children.
10. Changes to this Policy
We may update this Policy from time to time. We will post the updated version and change the "Last updated" date, and where required will notify you.
11. Contact and complaints
Questions or complaints: contact@stgma.id. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.